r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash 76d5eb597558e3dee0d99719d17e71e0
f3a0f3932fa8059f27dc9422d523b938fa9a7d09
d16de6cc9eb0e1297f53dc1137bb764bf5c21a7727be32ad05afebd1fe9501ed
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D16DE6CC9EB0E1297F53DC1137BB764BF5C21A7727BE32AD05AFEBD1FE9501ED"
Last-Modified: Sat, 10 Sep 2022 18:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2686
Expires: Tue, 13 Sep 2022 11:36:04 GMT
Date: Tue, 13 Sep 2022 10:51:18 GMT
Connection: keep-alive
firefox.settings.services.mozilla.com/v1/
143.204.55.36200 OK 939 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (939), with no line terminators
Hash b593eb39329cfe060d55be5e4a5405e2
78e46c1028e9f94f8569303ad2d90d7df13a059a
08a810103557efe55ca4425ff0cf82593f1f54633df899127eaec9bee05d4d04
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 939
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: Retry-After, Alert, Content-Length, Content-Type, Backoff
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Date: Tue, 13 Sep 2022 10:08:43 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
X-Cache: Hit from cloudfront
Via: 1.1 80d21802b1b80c40e55ccf83433b8eac.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: _uiXOO5U2TLdyWr8AjBW8-k3n7DwnZH29UX7VWwpyXLX0T4RLsATdQ==
Age: 2555
soporte.infocdmx.org.mx/dist/temp/accesoonline
189.240.12.19302 Found 327 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 9da1c7cb9159420a7d6ce6d581e00d1d
a9f726687b34edc2d4fefc33050d9433c84fa4a6
07cd670addb42605ee4baa6f9c1eb4d47c3651aec34a4e22144054c9862fe689
Analyzer Verdict Alert openphish Bank of America
fortinet Phishing
GET /dist/temp/accesoonline HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 302 Found
Date: Tue, 13 Sep 2022 10:51:18 GMT
Server: Apache/2.4.10 (Ubuntu)
Location: https://soporte.infocdmx.org.mx/dist/temp/accesoonline
Content-Length: 327
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
143.204.55.49200 OK 5.3 kB URL HTTP/2 content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain
IP 143.204.55.49:0
File type PEM certificate\012- , ASCII text
Hash 742edb4038f38bc533514982f3d2e861
cc3a20c8dc2a8c632ef9387a2744253f1e3fdef1
b6bfa49d3d135035701231db2fffc0c0643444394009a94c6a1b4d829d6b8345
GET /chains/remote-settings.content-signature.mozilla.org-2022-10-09-23-18-04.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: binary/octet-stream
content-length: 5348
last-modified: Sat, 20 Aug 2022 23:18:05 GMT
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
date: Tue, 13 Sep 2022 07:17:13 GMT
etag: "742edb4038f38bc533514982f3d2e861"
x-cache: Hit from cloudfront
via: 1.1 4f01f770085624552bc30a98954f963a.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: bytqiRtYU_CwnxoMCnSyeCGPLykIwQNFaLm-PzvEwNdBeurO03YF8g==
age: 22564
X-Firefox-Spdy: h2
contile.services.mozilla.com/v1/tiles
34.117.237.239200 OK 12 B URL HTTP/2 contile.services.mozilla.com/v1/tiles
IP 34.117.237.239:0
File type JSON data\012- , ASCII text, with no line terminators
Hash 23e88fb7b99543fb33315b29b1fad9d6
a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce
7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 13 Sep 2022 10:51:18 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
143.204.55.36200 OK 329 B URL HTTP/1.1 firefox.settings.services.mozilla.com/v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US
IP 143.204.55.36:0
File type JSON data\012- , ASCII text, with very long lines (329), with no line terminators
Hash 0333b0655111aa68de771adfcc4db243
63f295a144ac87a7c8e23417626724eeca68a7eb
60636eb1dc67c9ed000fe0b49f03777ad6f549cb1d2b9ff010cf198465ae6300
GET /v1/buckets/main/collections/ms-language-packs/records/cfr-v1-en-US HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/json
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Content-Type: application/json
Content-Length: 329
Connection: keep-alive
Access-Control-Allow-Origin: *
Access-Control-Expose-Headers: ETag, Expires, Content-Length, Cache-Control, Pragma, Content-Type, Alert, Backoff, Last-Modified, Retry-After
Content-Security-Policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
Last-Modified: Fri, 25 Mar 2022 17:45:46 GMT
Strict-Transport-Security: max-age=31536000
X-Content-Type-Options: nosniff
Cache-Control: max-age=3600
Date: Tue, 13 Sep 2022 10:03:22 GMT
Expires: Tue, 13 Sep 2022 10:05:49 GMT
ETag: "1648230346554"
X-Cache: Hit from cloudfront
Via: 1.1 c9f2a4d2bcd548d1a3cbe1617a22f216.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: NBsUOP219kgQ3OHfvNDkcPfHsViGdjWjg0kSMDDA0EqwoDPYxdGPew==
Age: 2876
ocsp.digicert.com/
93.184.220.29200 OK 471 B IP 93.184.220.29:0
Hash e96dbe1b54932c8f447bbbfc9d31cfb0
b15d4a54fbdf95b0af8bd34b6f8ef03055eef0cd
427326963ac1ef6ddeeaf52ab07807c694b82effa6111671ada8270b1faecdae
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 6326
Cache-Control: 'max-age=158059'
Content-Type: application/ocsp-response
Date: Tue, 13 Sep 2022 10:51:18 GMT
Last-Modified: Tue, 13 Sep 2022 09:05:52 GMT
Server: ECS (ska/F71D)
X-Cache: HIT
Content-Length: 471
ocsp.sectigo.com/
172.64.155.188200 OK 472 B IP 172.64.155.188:0
Hash 2fe6bf7e18a3784aa2019618c6af9b17
1f327bdd9393942e5a0e20866f65be0ae381dac7
284b7c606b486e69a72ff33bb042c40a2e6d7e4f86c813943c6d043af3e45c78
POST / HTTP/1.1
Host: ocsp.sectigo.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:19 GMT
Content-Type: application/ocsp-response
Content-Length: 472
Connection: keep-alive
Last-Modified: Sat, 10 Sep 2022 14:06:30 GMT
Expires: Sat, 17 Sep 2022 14:06:29 GMT
Etag: "1f327bdd9393942e5a0e20866f65be0ae381dac7"
Cache-Control: max-age=356709,s-maxage=1800,public,no-transform,must-revalidate
X-CCACDN-Proxy-ID: mcdpinlb3
X-Frame-Options: SAMEORIGIN
CF-Cache-Status: DYNAMIC
Server: cloudflare
CF-RAY: 74a053b23ccbb511-OSL
push.services.mozilla.com/
52.40.161.235101 Switching Protocols 0 B URL HTTP/1.1 push.services.mozilla.com/
IP 52.40.161.235:0
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: GcT5XBmninLGVYC9tKEF8w==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: pd1nc2efJfAq6kLrZnZQpcjiAmM=
soporte.infocdmx.org.mx/dist/temp/accesoonline
189.240.12.19301 Moved Permanently 353 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash f8cffe8553e3501cd6c6bf394381b155
a07c9b5646316446f11a53eccccd5445c0abb298
42c812fd2f7d8f44cdc3b0fa03144c146a39b18ceaf2155a1ebb325d203f53dc
Analyzer Verdict Alert openphish Bank of America
fortinet Phishing
GET /dist/temp/accesoonline HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 301 Moved Permanently
Date: Tue, 13 Sep 2022 10:51:19 GMT
Server: Apache/2.4.10 (Ubuntu)
Location: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Content-Length: 353
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
soporte.infocdmx.org.mx/dist/temp/accesoonline/
189.240.12.19200 OK 1.8 kB URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type PHP script text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document text\012- exported SGML document, Unicode text, UTF-8 text
Hash f2df743bbf6a9975745ddd5b717e3bc6
f5e5decffb73c8e681fae17607af524d2ef95608
934adad39f67884054c2059730833dc4d7ce9c2f8ae5b0e55fe563d32d336574
Analyzer Verdict Alert openphish Generic/Spear Phishing
fortinet Phishing
GET /dist/temp/accesoonline/ HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "181b-5d64921215e1b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1757
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/normalize.min.css
189.240.12.19200 OK 771 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/normalize.min.css
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type ASCII text, with very long lines (1815), with no line terminators
Hash cf1b2d08ed555623f2aa4eb5b57d96fe
42dee0a9fc49e70cf346ed30b7e8f7450e2c569a
bae324627feb6ed3d9ff142b46ee8b4e3eb960a956413f133ffcf3fa6b201895
GET /dist/temp/accesoonline/paso1_files/normalize.min.css HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "717-5d64921214e7b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 771
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/css
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
189.240.12.19200 OK 2.9 kB URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type ASCII text, with CRLF line terminators
Hash 1c3e90bb59fe39fe342571e64d4cf590
73944abe5d4ffda1e3b4a2e419a15989077caefa
15da85cd5636654669cbfae76021f5012a5ccbc20b39a4cd64add2d4adf13e02
GET /dist/temp/accesoonline/paso1_files/estilos.css HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "3a48-5d64921213edb-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 2921
Keep-Alive: timeout=5, max=97
Connection: Keep-Alive
Content-Type: text/css
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/lock.jpg
189.240.12.19200 OK 368 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/lock.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 10x14, components 1\012- data
Hash ba2f91f9a42815a1f003fc6db2f16c3f
f0d6eeeff1a7aa79637fa06535713872a3174796
831a3c42a161e708ad2ab80fcd7fbc67e03d644f6d5affcc6be55844f3345c41
GET /dist/temp/accesoonline/paso1_files/lock.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "170-5d64921214e7b"
Accept-Ranges: bytes
Content-Length: 368
Keep-Alive: timeout=5, max=96
Connection: Keep-Alive
Content-Type: image/jpeg
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/funciones.js.descarga
189.240.12.19200 OK 1.9 kB URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/funciones.js.descarga
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type Unicode text, UTF-8 text, with CRLF line terminators
Hash 82eb43c8f9c6def686e2e0eaf19c8e65
0b0f848700a06c74caf41d738a9cd6b704b966ea
92d556f28a15c6eda7326637a94f0d64235fbd291814ef256ec46a62ce2f0464
Analyzer Verdict Alert fortinet Phishing
GET /dist/temp/accesoonline/paso1_files/funciones.js.descarga HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "2145-5d64921214e7b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 1888
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/help.jpg
189.240.12.19200 OK 793 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/help.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 16x16, components 3\012- data
Hash 82e8bde9033a5208e9e187d98e8a531a
7fbc6c71bbf107f4f9ffe24793b21237bf585404
d2473944f721eaad91fee76e240f71689dc22636301267de22a19aa3ab618f1f
GET /dist/temp/accesoonline/paso1_files/help.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "319-5d64921214e7b"
Accept-Ranges: bytes
Content-Length: 793
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/logo.jpg
189.240.12.19200 OK 5.4 kB URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/logo.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type JPEG image data, JFIF standard 1.01, resolution (DPCM), density 150x150, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=3], baseline, precision 8, 230x28, components 3\012- data
Hash 7402bc57a0f4efbf93024a73d9857eac
b8971e24207eaaeeeea6c0082185332c1199425f
eb186852800917b3c23a54935991893eda4bfb6377761ea27190ff246bb9e6f7
GET /dist/temp/accesoonline/paso1_files/logo.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "151a-5d64921214e7b"
Accept-Ranges: bytes
Content-Length: 5402
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/movil.jpg
189.240.12.19200 OK 8.6 kB URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/movil.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 149x208, components 3\012- data
Hash 352428d969c7d194bb97828ac476b07a
67438657585bcd1ed1051c4980a698620776f57a
77bc1d3909183b5c0cd2f438d865b2fc290c1fb1d978bc4bb52c006db3fcab27
GET /dist/temp/accesoonline/paso1_files/movil.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "21c4-5d64921214e7b"
Accept-Ranges: bytes
Content-Length: 8644
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: image/jpeg
soporte.infocdmx.org.mx/dist/temp/accesoonline/fonts/cnx-regular.woff
189.240.12.19404 Not Found 333 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/fonts/cnx-regular.woff
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 62ffd6eafbb68d19226e802124dcf856
d1f85d2eef03661c9f977a460171812d4efd8bbf
b0f13a50e1ff797ec4a98945c254573760054a397c47ffead6e0ee8b03dc232c
Analyzer Verdict Alert fortinet Phishing
GET /dist/temp/accesoonline/fonts/cnx-regular.woff HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Content-Length: 333
Keep-Alive: timeout=5, max=95
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/points.jpg
189.240.12.19200 OK 287 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/points.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=5, orientation=upper-left, xresolution=74, yresolution=82, resolutionunit=1], baseline, precision 8, 1x15, components 1\012- data
Hash d9556a50240bfa15c546e0515fa814bb
ac2527cf82c620c1d583672268483155c732efa2
14a615e9c447380dd58053a0e6d9f6a54a6303fa10db77d9e4043724221fe497
GET /dist/temp/accesoonline/paso1_files/points.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "11f-5d64921213edb"
Accept-Ranges: bytes
Content-Length: 287
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: image/jpeg
soporte.infocdmx.org.mx/dist/temp/accesoonline/img/sign-in-sprite.jpg
189.240.12.19404 Not Found 333 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/img/sign-in-sprite.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 91a8b011949cd9b515c33ed8c4b2d817
c71b9d216038bb43295ec549f235dbd18df3f950
c1a5bc404e7644951fbc41848c6f15422d2c74da3ba1b254d5be5e4e01168930
GET /dist/temp/accesoonline/img/sign-in-sprite.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Content-Length: 333
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/jquery-3.6.0.min.js.descarga
189.240.12.19200 OK 31 kB URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/jquery-3.6.0.min.js.descarga
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type ASCII text, with very long lines (65447)
Hash 31d53c8cdce8012a24abc8e84aa972e5
7287b1ec5d88304ba44fc1958b8de9596274c4e3
1b72bc7f54bc9170e605f6c4bb5529668c4ee3efeee602fdb63036b45b49f41c
Analyzer Verdict Alert fortinet Phishing
GET /dist/temp/accesoonline/paso1_files/jquery-3.6.0.min.js.descarga HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 OK
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Last-Modified: Mon, 24 Jan 2022 00:34:20 GMT
ETag: "15d9d-5d64921214e7b-gzip"
Accept-Ranges: bytes
Vary: Accept-Encoding
Content-Encoding: gzip
Content-Length: 30902
Keep-Alive: timeout=5, max=100
Connection: Keep-Alive
Content-Type: application/javascript
soporte.infocdmx.org.mx/dist/temp/accesoonline/img/lock2.jpg
189.240.12.19404 Not Found 324 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/img/lock2.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 7303671ed6e2ea727c8ed52912fa8506
e1333c828af6a0df27feb1f995c4e222a0e258e6
846c963fc6b6ec475bb2074ee6cb25981af6457d931f585d396ffb3c87c651ba
GET /dist/temp/accesoonline/img/lock2.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Content-Length: 324
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
soporte.infocdmx.org.mx/dist/temp/accesoonline/img/line.jpg
189.240.12.19404 Not Found 323 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/img/line.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 082296e2b426b00c006a7c5a2428f57d
3965786be87e1f0952ed0f0649debb1e4cdbcf46
b47bcd23d3841f26ee9044fdbaa22d1869f9b13f0c1ca48d8535b6d6ee7d2748
GET /dist/temp/accesoonline/img/line.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Content-Length: 323
Keep-Alive: timeout=5, max=99
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
soporte.infocdmx.org.mx/dist/temp/accesoonline/img/casa.jpg
189.240.12.19404 Not Found 323 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/img/casa.jpg
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash 2c3ddf17150d1de8c40649ee8eda07c8
3cedd8ee7d52ec38490a0d0e815d76927076386c
53f67fe4a326bfa2250cc49f28d508c78396ab46884accb867b0fef879d0a70c
GET /dist/temp/accesoonline/img/casa.jpg HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 10:51:20 GMT
Server: Apache/2.4.10 (Ubuntu)
Content-Length: 323
Keep-Alive: timeout=5, max=94
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
soporte.infocdmx.org.mx/dist/temp/accesoonline/fonts/cnx-regular.ttf
189.240.12.19404 Not Found 332 B URL HTTP/1.1 soporte.infocdmx.org.mx/dist/temp/accesoonline/fonts/cnx-regular.ttf
IP 189.240.12.19:0
ASN #8151 Uninet S.A. de C.V.
File type HTML document text\012- HTML document text\012- HTML document text\012- HTML document text\012- exported SGML document, ASCII text
Hash c80ead14f1a965a62108670ddef8c12b
5bb6ddead2e1fdae248a8da49a27467592cf615c
8f7f84ab47de7b86fcb377721fd9475a090e1811c9f16a591d6a4cd37c557252
Analyzer Verdict Alert fortinet Phishing
GET /dist/temp/accesoonline/fonts/cnx-regular.ttf HTTP/1.1
Host: soporte.infocdmx.org.mx
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://soporte.infocdmx.org.mx/dist/temp/accesoonline/paso1_files/estilos.css
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 404 Not Found
Date: Tue, 13 Sep 2022 10:51:21 GMT
Server: Apache/2.4.10 (Ubuntu)
Content-Length: 332
Keep-Alive: timeout=5, max=98
Connection: Keep-Alive
Content-Type: text/html; charset=iso-8859-1
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5421
Expires: Tue, 13 Sep 2022 12:21:41 GMT
Date: Tue, 13 Sep 2022 10:51:20 GMT
Connection: keep-alive
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5421
Expires: Tue, 13 Sep 2022 12:21:41 GMT
Date: Tue, 13 Sep 2022 10:51:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 838f709437b2dfbede4ee15307afe217
2ab2ee20e720b78be6deb55f967ac0d8b7dad048
a3b47ce595b475f2aab6f7378888d15ba3e98453d6c8a3d88946efc5d65eedba
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc9a2dff5-4864-4430-8c54-6b68d2bbd35a.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10849
x-amzn-requestid: 722d8d75-0911-4b59-af65-2b408bc09d80
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXbx6E9-oAMFT8w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa672-74ea9343619d4a1865e34818;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:36:50 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 4rpwcrZLDlgcwBtH7wpoHMOb8hhFbKbZSQpjWqUqbt_Sl4ud3dm9Vg==
via: 1.1 1b0911478686968732f973d6e5e31d10.cloudfront.net (CloudFront), 1.1 707e733794d52100fde0ab21bf0b1462.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:18 GMT
age: 47342
etag: "2ab2ee20e720b78be6deb55f967ac0d8b7dad048"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
r3.o.lencr.org/
23.33.119.27200 OK 503 B IP 23.33.119.27:0
ASN #20940 Akamai International B.V.
Hash fe792a43fbfd72d158215bb5fa087c19
5b28cebdebfdd33871fa4982f39a89f5ce3cbf99
ec9ddd9d47e4cd14bd7471042ce3060c1d119038dac5d1f02a4040c617228b0d
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "EC9DDD9D47E4CD14BD7471042CE3060C1D119038DAC5D1F02A4040C617228B0D"
Last-Modified: Mon, 12 Sep 2022 20:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5421
Expires: Tue, 13 Sep 2022 12:21:41 GMT
Date: Tue, 13 Sep 2022 10:51:20 GMT
Connection: keep-alive
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
34.120.237.76200 OK 9.9 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash c9ab2ec10c79b91d15edb1d1e3dc763c
744fee4a0baa22ba3aa352d60620a916972b47dd
f7bb66f5bb572d73f936fc74823f51ede1f2c4e309a939b39d9529ff8f757fbe
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F2830e2cb-8887-441e-8c0c-906b8fbb2366.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9945
x-amzn-requestid: a347749f-a63a-4533-a274-7151b9f235ff
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YXcX8HAKoAMF5EQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631fa765-56cff18515b2a5b3397231df;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 21:40:53 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: lZ3FmD1gM8YBgZNt97kuYSol1kj0GQqRjyLT_7715VtH9GR1WpMDxA==
via: 1.1 d1151317ba32afe0e6370fd69fed222e.cloudfront.net (CloudFront), 1.1 989017835f43d594873bde5a7ee7fe5e.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:42:20 GMT
age: 47340
etag: "744fee4a0baa22ba3aa352d60620a916972b47dd"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106eeeca-4365-4ffc-b701-f952d0b09dcb.jpeg
34.120.237.76200 OK 8.0 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106eeeca-4365-4ffc-b701-f952d0b09dcb.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 47e1f64348aa12d707bf070f39877c7e
7a1f13d32de956fd50fccba0f813fb71bda79f63
9b3cee8039a2adb1291006a9ad55cd5032a2a6c10de3c5f57222692b02c0faac
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F106eeeca-4365-4ffc-b701-f952d0b09dcb.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 7965
x-amzn-requestid: c0ddd7c6-9709-4251-8e7b-4a551f9a7d2f
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YBro8EjxIAMFi0g=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6316f305-26023e0714937dca063dcbfa;Sampled=0
x-amzn-remapped-date: Tue, 06 Sep 2022 07:13:09 GMT
x-amz-cf-pop: SEA73-P2
x-cache: Hit from cloudfront
x-amz-cf-id: jj0LCxD4MdspTSEvLVsUaEbdNjjae7G-gogDBKtx1IE9VZauS4BblQ==
via: 1.1 000f4a2f631bace380a0afa747a82482.cloudfront.net (CloudFront), 1.1 73b60e9a9fd08eae9e034cedba707280.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 23:11:59 GMT
age: 41961
etag: "7a1f13d32de956fd50fccba0f813fb71bda79f63"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg
34.120.237.76200 OK 11 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8245683fe462ff0393ab02b56ea18789
2d11d7d4547ded348f9e32cd946877e16ad587ae
992f87a9da550b8dbd14cdcd7c5f11903a2bef58db7ced55f456d29d339bf94b
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fd8556c96-436b-4bd5-a201-21cf57a952e7.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10824
x-amzn-requestid: 6c1f4a34-e245-4b3b-a5ba-fcf0cdd68830
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YUxaqELPIAMFmjg=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631e95dd-0ef865e80de591f27515d35f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 02:13:49 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: UngASNEgeiacesJ_cxd4nvDatNrjsx3081wzpW7A3xPPgB1drnAEBA==
via: 1.1 e9ba0a9a729ff2960a04323bf1833df8.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 13 Sep 2022 03:38:19 GMT
age: 25981
etag: "2d11d7d4547ded348f9e32cd946877e16ad587ae"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9bab12-4fd5-4be7-b453-25dfb0d4c606.jpeg
34.120.237.76200 OK 9.6 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9bab12-4fd5-4be7-b453-25dfb0d4c606.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 6c824a7db30839607b01c7a164f6f6ec
bbab791971056750a46dd6ed9c5d7c8e12ab457e
872262a28a383a9eafd1f453014a3edfde4872160b772874271be6358a47449f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fcb9bab12-4fd5-4be7-b453-25dfb0d4c606.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9606
x-amzn-requestid: bf72ce8c-1272-42df-8958-d392210106c5
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YIR7NFh2oAMFXIQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631996ad-4646091a428db21e2dce1a61;Sampled=0
x-amzn-remapped-date: Thu, 08 Sep 2022 07:15:58 GMT
x-amz-cf-pop: SEA73-P1
x-cache: Hit from cloudfront
x-amz-cf-id: 4skZVE5BinFMAJV196j5-qtDez6m26DtU8NZvU6K2VuhFnC7E1zXWw==
via: 1.1 0bb842bd5868b86440983b936bb0adee.cloudfront.net (CloudFront), 1.1 91356d2137f5a7345e93da4516c49ec4.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:56:19 GMT
age: 46501
etag: "bbab791971056750a46dd6ed9c5d7c8e12ab457e"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
34.120.237.76200 OK 10 kB URL HTTP/2 img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg
IP 34.120.237.76:0
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data
Hash 8c1314c7778ea0d32e8c69dae0c38b6d
c4772b9b182f9f905fead84f3761fe296073ca65
5fc8dc23f9b4d150b834aa69b358edd9f9f5f449607df07d579df66098d8aac6
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F77296a12-991a-4ab6-9ce0-05b3a82d6664.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:96.0) Gecko/20100101 Firefox/96.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10366
x-amzn-requestid: c66a0e06-d45c-4d16-ba0c-bf6a2368cfc2
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: YVQPkH2RoAMFX2w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-631ec730-5174741f2d86d3ea018e452f;Sampled=0
x-amzn-remapped-date: Mon, 12 Sep 2022 05:44:16 GMT
x-amz-cf-pop: HIO50-C1, SEA73-P1
x-cache: Miss from cloudfront
x-amz-cf-id: 0ieBLVDdyIQuPO5pdM8wzjY2XwaMhLJhJWAUtsLfgiWTKVBTOws1tQ==
via: 1.1 6ba2a21321beeef65404429d0a4b6380.cloudfront.net (CloudFront), 1.1 6396e88c437c096ef98930ce29f731a2.cloudfront.net (CloudFront), 1.1 google
date: Mon, 12 Sep 2022 21:58:04 GMT
etag: "c4772b9b182f9f905fead84f3761fe296073ca65"
content-type: image/jpeg
age: 46396
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2